CVE-2022-28946

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-05-19

Last modified

2024-08-03

Affected products

• Open Policy Agent (Openpolicyagent)

References

• https://github.com/open-policy-agent/opa/commit/e9d3828db670cbe11129885f37f08cbf04935264